Tumblr Law Enforcement Guidelines 


These guidelines are for law enforcement officials seeking user records from Tumblr, Inc. 
(“Tumblr”), and for Tumblr users who want to know more about our policies for dealing with 
law enforcement and other government requests for information. More general information about 
Tumblr’s terms and policies is provided in our Terms of Service, Community Guidelines, and 


Privacy Policy. 


What is Tumblr? 


Tumblr is a media network that allows users to create, post, share, and follow the digital media 
that they love. More information about the Tumblr platform is available here. 


What are Tumblr’s Principles Regarding Law Enforcement Requests? 


« Freedom of expression: freedom of expression is of utmost importance, and law 
enforcement requests should be respectful of that freedom 

* Compliance with law: law enforcement requests must comply with all laws, particularly 
those protecting user information, and must clearly establish the legal need for disclosure 

« Specificity: law enforcement requests must be related to specific investigations and 
specific accounts implicated in those investigations 

« Notice: whenever legally permitted, users should receive notice that their information is 
being requested 

« Security: we believe that no government should install backdoors into web security 
protocols, or otherwise compromise the infrastructure of the internet. We'll fight the laws 
that allow them to do so, and we'll work to secure our users' data against such intrusions 


Information Stored by Tumblr 


Tumblr is an open platform and most Tumblr information is posted publicly, so you can usually 
view Tumblr blog posts, likes, and reblogs by simply visiting the appropriate Tumblr blog or tag 
page. You do not need a Tumblr account in order to view content posted publicly. 


Tumblr collects and stores non-public user information in accordance with our Terms of Service 
and Privacy Policy. The information we have may not be the information of a real person, for 
example, if the user has created a fake or anonymous profile. Tumblr does not require identity 
authentication. 


Disclosure of Non-Public Information requires a Valid Subpoena, Search 
Warrant, or Other U.S. Governmental Order 


Tumblr is located in New York, New York, and may disclose non-public account information 
only in accordance with our Terms of Service, Privacy Policy, and applicable U.S. law, including 
the federal Stored Communications Act, 18 U.S.C. §§ 2701-2712. 


In accordance with U.S. law, Tumblr may respond to requests for disclosure of non-public 
information from foreign law enforcement agencies when issued by way of a U.S. court (such as 
through a letter rogatory or mutual legal assistance treaty). 


Contact Information 


Requirements for Requests for Non-Public Information 


Tumblr may disclose data that is identified with sufficient particularity through valid legal 
process, and that we are reasonably able to locate and retrieve. 


All requests must accurately identify the specific Tumblr user account by an email address 
associated with the account, or an account name or URL. Tumblr will not respond to general, 
vague, overbroad, or imprecise requests. 


Requests must also clearly identify the specific information requested, and the relationship of 
that information to the applicable investigation. 


An order of sufficient legal scope is required for disclosure. For example, a valid subpoena 
issued in connection with an official criminal investigation is required to compel disclosure of 
basic subscriber records, as defined in 18 U.S.C. Section 2703(c)(2). Such records include length 
of service, registered email address(es), and IP login(s), if available. Tumblr does not collect 
name or address information from its users, and therefore cannot provide this information to law 
enforcement. 


A search warrant issued under the procedures described in the Federal Rules of Criminal 
Procedure or equivalent state warrant procedures, based on a showing of probable cause, is 
required to compel disclosure of the stored contents of any account, such as blog posts or. 
messages. 


Requests must come from appropriate government or law enforcement officials; Tumblr will not 
respond to requests from other sources. 


Finally, please provide a valid law enforcement email address with your request, so that we can 
communicate with you upon receipt. Tumblr will not respond to any law enforcement requests 
sent from a non-law enforcement email address. 


User Notice 


Tumblr respects its users’ rights and privacy. Tumblr’s policy is to notify its users about requests 
for their information, and to provide them with copies of the legal process underlying those 
requests. This sort of notice is necessary so that affected users have the chance, if they wish, to 
challenge those requests. In some cases, Tumblr may be prohibited by law from providing 
notice, such as when we receive a non-disclosure order pursuant to 18 U.S.C. § 2705(b). In these 
situations, Tumblr’s policy is to notify the affected users after the non-disclosure period has 
elapsed. 


In exceptional circumstances, such as cases involving the sexual exploitation of a child, Tumblr 
may elect not to provide user notice before complying with the request. If an investigation 
involves such an exceptional circumstance, law enforcement should provide a description of the 
situation for us to evaluate. In these exceptional circumstances, Tumblr’s policy is to notify the 
affected users 90 days after the time we respond to the request. 


Preservation Requests 


Tumblr will preserve account records, to the extent they are available, for 90 days upon receipt 
of a valid preservation request issued in accordance with applicable law. Preservation requests 
must comply with the general requirements for requests, above. 


Emergency Requests 


If law enforcement officials believe there is an emergency involving death or serious physical 
injury to any person, and Tumblr may have information necessary to prevent the harm, they can 
submit an emergency disclosure request using the designated form. Such requests should include 
all of the following: 


« Identity the individual in danger of death or serious physical injury; 

+ Nature of the emergency; 

« Tumblr username/URL of the individual (e.g., http://staff.tumblr.com) of the account(s) 
containing information necessary to prevent the emergency; 

« Links to any specific posts containing relevant information; 

« The specific information requested and why that information is necessary to prevent the 
emergency; and 

+ Any other relevant details or context regarding the particular circumstances. 


Tumblr users aware of an emergency situation should contact local law enforcement officials for 
assistance. 


Matters Involving Child Safety 


Tumblr reports any apparent instances of child exploitation it discovers to the National Center 
for Missing and Exploited Children (NCMEC), including information brought to our attention by 
government requests. If a law enforcement request relates to a child exploitation or safety matter, 
those circumstances should be specified in the request (and include any NCMEC report 
information, if applicable), to ensure that appropriate action is taken as quickly as possible. 


Cost Reimbursement 


Tumblr may seek reasonable reimbursement costs for responding to law enforcement requests 
for information. 


Can't find what you're looking for? Contact us 


INSTRUCTIONS FOR DOWNLOADING AND 
OPENING ENCRYPTED TUMBLR BLOG BACKUPS 


Downloading Tumbir Encrypted Backups 


To begin downloading a backup of a target Tumblr blog, click the link provided beginning with 


https://s3zipper.srvcs.tumblr.com. The download should begin immediately, and may take 
some time to complete depending on the size of the requested backup. We recommend using a 
download manager - managers can be installed in the browser, or on the operating system as 
applications. Examples of download managers include: 

e@ Chrono Download Manager a Chrome Browser Plugin 

e Microsoft Download Manager a Microsoft product designed for Windows 

e iGetter for Mac OS. 


Note that Tumblr cannot provide technical support for these third-party products. 


When the download is complete, you will have downloaded a ‘zip’ file with a random, unique 


name, such as: 


eadeScf43a92487ef9d036b0c92ac8345f6eafee896b8388046c2d99ac1 9dbB8.zip 


= https://s3zipper.srvcs.tumblr.com:4443/ea9e5cf43a92487ef9d036b0c92ac8345fbeafee. 


Show in Finder 


Opening Tumblr Encrypted Backups 


All Tumblr backups are encrypted with unique passwords that will be supplied by Tumblr. 
Passwords are sent via a second email, which you will receive after the email that contains the 
download link for the archive. The process of opening the downloaded zip file is slightly 


different on Windows and Mac operating systems. 


NOTE: The archive utilities that are built in to the Windows and Mac operating systems cannot 
open the compressed file supplied by Tumblr. You must download and install a third party 
utility. We have provided instructions below for two such utilities, 7-Zip (Windows) and IZip 
(Mac). Other products may be equally effective. Tumblr cannot provide technical support for 


these third-party products. 


Windows 


1. Install 7-Zip 
o Download 7-Zip from the homepage https://www.7-zip.org/ 


Download 7-Zip (2019-02-21) for Windows: 


Link Type Windows Size 
wn sexe 32-bit x86 1MB 
Download -exe 64-bit x64 1MB 


o Open the 7-Zip installation file and click ‘Install’ to complete installation. 


Name Date modified Type 


[ 721900-x64.exe 3/29/2019 10:16AM Application 
7-Zip 19.00 (x64) Setup x 
Destination folder: 


[naa] [cree] 


2. Now unzip the downloaded file with 7-Zip by right clicking on the file and clicking Extract 


to “<name of file>” from the 7-zip Context Menu as pictured: 


Downloads 
Share View Compress 


3 + & [> ThiseC > Documents + Downloads 


~ Name 


a Quick access 
i Desttop 
# Downloads 


"J fos51001732513578<536304H06406017ee. 


Open in new window 


B Documents 
i Estract Al 


Open achive 22ip 
Open archive xcs 

btract files. Pinto Stat 

prec Here Scan wth Windows Defender. 
tract to WES TadTTRSTSS TRISHA ecETO ONT CRECTTECSNGOOET ] Shae 

Test archive Open wth 

Ad to archive. 


Give accessto 
Compress and email. 


‘Add to "1b65tad1732513578cB3630af0640601 .. 679129067 f06eta cMaadab 2.72 
Compress to Yb6S1ad1732513578836203f064b601 ..679129067cf06e4a16cSaad0ab_2.72" and email 
Add to "Th651ad1732513578c83630af064b601 .. 79129067cf06eta16cS4aad0ab_22ip° Cut 
Compress to "65 ad1732513573c83620M084b601 .. 79129067 f06eta 1ScSaad0ab_2zip" and email Copy 


Restore previous versions 


Send to 


(Create shortcut 
Delete 


Rename 


Properties 


3. Enter the password provided by Tumblr, and the zip will be extracted to a folder with the 
same name as the original zip. 


Extract 
Home Share View Compressed Folder Tools 


~ 4 || « Documents >» Downloads > 


Pace 


| Sapoed time: Total size: 
+ Remaining time: 


| Compression ratio: 


Enter password 


Enter password: 


Cshow password 


a 


Once complete, the highlighted folder will contain the blog backup content: 


Name Date modified T 


fb651ad1732513578c83630af054b601 7ee0. 
fb651ad1732513578c83630af064b6017ee0. 


Mac OS 


1. Install iZip by downloading it from it's home page, https://www.izip.com 


IZIP IS THE BEST WAY TO 
MANAGE ARCHIVES ON MAC OS 


Lapa teeates ney range 229%, AINA 


Wows na Compre Exe 


SIMPLE TO USE > SECURE SHARING vi 100% FREE! 


o The ‘Download Free’ button will download izip.dmg to your computer, double 
click the icon to open the package. 


izip.dmg 


Show in Finder 


o Click and drag iZipp.app to the Applications folder. 


el 
ae 


iZip.app Applications 


2. Open the encrypted zip with iZip - this can be done by right clicking the file and selecting 
‘Open With’: 


Be Open 
— —EEE———EE Ml Archive Utilty.app (default) 
Move to Trash i 


Get nfo The Unarchiver.app 
ere App Store... 

Duplicate a 

Make Alias 


o If you'd like to change the default application for opening zip files to be iZip, see 
( cussion: ple.com/thread/46é for instructions on changing 


default apps. 
3. When prompted, enter the password provided by Tumblr and click ‘Ok’ to open the 


package contents. 


Password for new files 
iZip has detected one or more password protected files. Please 
enter a password to use for securing files added to this archive. 
This password may be different to the one used for existing files, 


selecting 'No password! will result in newly added files not being 
protected. 


Confirm 


No password 


0 The blog backup content will appear in a new window, and can now be opened 


from here or moved to a folder outside of iZip. 


8 194 2f1leaea9069atd90707de32 7adi73 ip (read-only zip) 


Date Modified Ske Kind 


